How to give User read only permission of web console? | Community
Skip to main content
Himanshu_Singhal
Community Advisor
Community Advisor
July 17, 2016

How to give User read only permission of web console?

  • July 17, 2016
  • 3 replies
  • 5650 views

Hi,

I've created a user. To that user, I want to assign read-only permission of web console to get to know the status only like in case of jmx console, User can read the repository status, can't edit anything.

How can we do that?

Thanks,

Himanshu

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

3 replies

kautuk_sahni
Community Manager
Community Manager
July 18, 2016

Hi 

By default only user 'admin' has got access on  OSGi console / Felix Console.

You would probably need give permission to some more user who can access this console but don't want to share admin password with them.
 
But this provide access to those users doesn't seems to be possible from /useradmin console of AEM , as it manages rights on repository content specifically and it doesn't have any option of OSGi console.
 
So , If you are in same scenario , you can follow below steps :
1. Create a group through /useradmin console of AEM, e.g osgi_console_admin
2. Add the user whom you want to provide access to OSGi console.
3. Go to Apache Sling Web Console Security Provider configuration in OSGi console through admin user.
http://host:port/system/console/configMgr/org.apache.sling.extensions.webconsolesecurityprovider.internal.SlingWebConsoleSecurityProvider
4. Add the created group name in the configurations and save .
5. You can also add username directly , but it is not a recommended approach.

 

Reference Links:-

Link: http://letusaem.blogspot.in/2014/06/manage-osgi-console-felix-console.html

Link: http://labs.6dglobal.com/blog/2012-09-07/cq55-osgi-systemconsole-permissions/

Link: http://blogs.adobe.com/experiencedelivers/experience-management/grant-access-to-osgi-console/

 

I hope this will help you.

Thanks and Regards

Kautuk Sahni

Kautuk Sahni
Himanshu_Singhal
Community Advisor
Community Advisor
July 18, 2016

But, this provides the User admin access. What according to the requirement, User should have only read permission so that User can be used in Curl command to get to know jmx repository status for backup.

User shouldn't be able to modify any configuration or anything in web console.

GK-007
Level 9
July 18, 2016

Have you tried by creating  a new user and providing READ only permissions at root level and then add that user to Web Console Configuration related??

I tried creating a new user and updated configuration.And now i am able to access Web Console by using this new user account.

You can also pass this same user in cURL command.

-Kishore

November 9, 2018

Hi @himanshusinghal

You can not set readonly for webconsole, see Granting Felix Console Access to Non-admin users

Regards,

Uy